Hello community, here is the log from the commit of package shadow for openSUSE:Factory checked in at 2019-09-07 11:27:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/shadow (Old) and /work/SRC/openSUSE:Factory/.shadow.new.7948 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shadow" Sat Sep 7 11:27:09 2019 rev:34 rq:727986 version:4.7 Changes: -------- --- /work/SRC/openSUSE:Factory/shadow/shadow.changes 2019-08-05 11:18:33.518506694 +0200 +++ /work/SRC/openSUSE:Factory/.shadow.new.7948/shadow.changes 2019-09-07 11:27:10.406481166 +0200 @@ -1,0 +2,14 @@ +Mon Sep 2 11:12:59 UTC 2019 - mvet...@suse.com + +- bsc#1144060: Add pam_keyinit.so to /etc/pam.d configuration files + to support kernel keyring feature +- Update pamd.tar.bz2 with pam configuration files accordingly + +------------------------------------------------------------------- +Mon Aug 19 14:50:02 CEST 2019 - ku...@suse.de + +- encryption_method_nis.patch: drop, DES should really not be used + anymore anywhere, even with NIS +- shadow-login_defs-suse.patch: remove encryption NIS entry + +------------------------------------------------------------------- Old: ---- encryption_method_nis.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ shadow.spec ++++++ --- /var/tmp/diff_new_pack.Tmfwn4/_old 2019-09-07 11:27:11.130481076 +0200 +++ /var/tmp/diff_new_pack.Tmfwn4/_new 2019-09-07 11:27:11.134481075 +0200 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # @@ -51,8 +51,6 @@ Patch6: shadow-4.1.5.1-userdel-helpfix.patch # PATCH-FIX-FEDORA shadow-4.1.5.1-logmsg.patch ku...@suse.com -- Fix error message. Patch7: shadow-4.1.5.1-logmsg.patch -# PATCH-FEATURE-SUSE encryption_method_nis.patch ku...@suse.com -- Add support for ENCRYPT_METHOD_NIS used by SUSE patch in pam (pam_unix). -Patch10: encryption_method_nis.patch # PATCH-FEATURE-SUSE shadow-login_defs-comments.patch ku...@suse.com -- Adjust login.defs comments. Patch13: shadow-login_defs-comments.patch # PATCH-FEATURE-SUSE shadow-login_defs-suse.patch ku...@suse.com -- Customize login.defs. @@ -101,7 +99,6 @@ %patch5 %patch6 %patch7 -%patch10 %patch13 %patch14 %if 0%{?suse_version} < 1330 ++++++ pamd.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/chage new/etc/pam.d/chage --- old/etc/pam.d/chage 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/chage 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth include common-auth account include common-account password include common-password +session optional pam_keyinit.so revoke session include common-session diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/chfn new/etc/pam.d/chfn --- old/etc/pam.d/chfn 2012-09-21 15:10:04.000000000 +0200 +++ new/etc/pam.d/chfn 2019-09-03 13:12:38.521810064 +0200 @@ -3,5 +3,6 @@ auth include common-auth account include common-account password include common-password +session optional pam_keyinit.so revoke session include common-session diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/chpasswd new/etc/pam.d/chpasswd --- old/etc/pam.d/chpasswd 2012-09-21 15:10:08.000000000 +0200 +++ new/etc/pam.d/chpasswd 2019-09-03 13:12:38.521810064 +0200 @@ -3,5 +3,6 @@ auth include common-auth account include common-account password include common-password +session optional pam_keyinit.so revoke session include common-session diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/chsh new/etc/pam.d/chsh --- old/etc/pam.d/chsh 2012-09-21 15:10:11.000000000 +0200 +++ new/etc/pam.d/chsh 2019-09-03 13:12:38.521810064 +0200 @@ -3,5 +3,6 @@ auth include common-auth account include common-account password include common-password +session optional pam_keyinit.so revoke session include common-session diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/groupadd new/etc/pam.d/groupadd --- old/etc/pam.d/groupadd 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/groupadd 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/groupdel new/etc/pam.d/groupdel --- old/etc/pam.d/groupdel 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/groupdel 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/groupmod new/etc/pam.d/groupmod --- old/etc/pam.d/groupmod 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/groupmod 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/newusers new/etc/pam.d/newusers --- old/etc/pam.d/newusers 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/newusers 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/passwd new/etc/pam.d/passwd --- old/etc/pam.d/passwd 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/passwd 2019-09-03 13:12:38.521810064 +0200 @@ -2,4 +2,5 @@ auth include common-auth account include common-account password include common-password +session optional pam_keyinit.so revoke session include common-session diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/useradd new/etc/pam.d/useradd --- old/etc/pam.d/useradd 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/useradd 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/userdel new/etc/pam.d/userdel --- old/etc/pam.d/userdel 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/userdel 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/etc/pam.d/usermod new/etc/pam.d/usermod --- old/etc/pam.d/usermod 2012-02-01 14:30:28.000000000 +0100 +++ new/etc/pam.d/usermod 2019-09-03 13:12:38.521810064 +0200 @@ -3,4 +3,5 @@ auth required pam_permit.so account required pam_permit.so password required pam_permit.so +session optional pam_keyinit.so revoke session required pam_permit.so ++++++ shadow-login_defs-suse.patch ++++++ --- /var/tmp/diff_new_pack.Tmfwn4/_old 2019-09-07 11:27:11.234481063 +0200 +++ /var/tmp/diff_new_pack.Tmfwn4/_new 2019-09-07 11:27:11.234481063 +0200 @@ -118,18 +118,16 @@ # # If set to MD5, MD5-based algorithm will be used for encrypting password -@@ -210,8 +203,8 @@ CHFN_RESTRICT rwh +@@ -210,7 +203,7 @@ CHFN_RESTRICT rwh # Note: If you use PAM, it is recommended to use a value consistent with # the PAM modules configuration. # -#ENCRYPT_METHOD DES --#ENCRYPT_METHOD_NIS DES +ENCRYPT_METHOD SHA512 -+ENCRYPT_METHOD_NIS DES # # Only works if ENCRYPT_METHOD is set to SHA256 or SHA512. -@@ -272,7 +265,7 @@ USERDEL_POSTCMD /usr/sbin/userde +@@ -268,7 +261,7 @@ USERDEL_POSTCMD /usr/sbin/userde # # This also enables userdel(8) to remove user groups if no members exist. #
